izchi
Hi,
I installed OpenVPN AS 2.1.4 on Ubuntu 14.04 (hosted) and configured it using the admin GUI. After that I generated certificates, config files for clients, set up the certificates on the server and tried to test connect to the server. Client couldn't connect and eventually I realized that the server is not listening for connections on 1194/UDP (netstat - a|grep 1194). Testing connection from the admin GUI also fails. I looked through the forums and noticed that there is an option to start OpenVPN server in command line for debugging, but I don't see "openvpn" command installed anywhere in the OpenVPN installation directory.
In AS Status Overview section of the Admin GUI is says: "Port for VPN client connections: tcp/443, udp/1194"
I don't see anything that seems relevant to this problem in the AS log file.
Could you anyone point me in the right direction for a solution?
Thank you, Alex.
The Johan
Netstat won't show you a port listening on the configured ports for Access Server, because Access Server runs multiple OpenVPN daemons simultaneously, and there is a type of loadbalancing going on using iptables, and iptables does not show up on netstat.
Check the log file on a client to see what it is trying to connect to, and what errors it gives, that's usually a good place to start to diagnose problems.
izchi
Hi,
Thanks for your advice.
The error that I get is: XML-RPC: Other SSL error: [('SSL routines', 'ssl23_read', 'ssl handshake failure')]
This is from the client log:
_______________________________________________
2016-11-11 14:22:36-0500 [Uninitialized] OpenSSL web ciphersuites: DEFAULT:!EXP:!PSK:!SRP:!LOW:!RC4
2016-11-11 14:22:36-0500 [XMLProxyQueryProtocol,client] DynamicClientBase: Unable to obtain Session ID from u'[.removed.]', port(s)=443: XML-RPC: Other SSL error: [('SSL routines', 'ssl23_read', 'ssl handshake failure')]: client/dyncli:90,internet/defer:744,python/failure:338,client/dyncli:128,internet/defer:744,python/failure:338,client/asxmlcli:107,client/asxmlcli:100,internet/defer:744,python/failure:338,client/asxmlcli:129,internet/defer:744,python/failure:338,client/asxmlcli:185,client/asxmlcli:180 (OpenSSL.SSL.Error)
_________________________________________________________
This is probably related to another problem, since I can't install an SSL certificate on the server. When I try to go the Web Server section of the OpenVPN AS Admin GUI in order to install a certificate, I see this error:
"SESSION ERROR: 'AdminWebConfig' object has no attribute 'test_result': internet/defer:102,admin/aweb:123,admin/aweb:96 (exceptions.AttributeError)"
I looked through the forum and couldn't find any relevant information. Have you encountered anything like that?
Thank you.
The Johan
Looks to me like your web interface of your Access Server is not configured right or is disabled. Since it's expecting to see the web interface on port TCP 443, try setting it to that port. And under client settings in the Admin UI, configure that the XML-RPC API is set to at least 'limited API'.
Regarding SSL certificate installation failures; pretty much all failures there are related to presenting the wrong certificate or malformed certificate. Remember, it accepts only PEM type certificates, the kind used for Apache and such, and doesn't take .pfx or .cer type certificates typically used for Windows operating systems. There's a Digicert certificate utility that you can use to convert the Windows type to PEM type. You can also use OpenSSL for this.
